chemscad (2.0.3), pcapprocessor (0.1.0) +3 more potentially affected by CVE-2026-102937 via virtualenv (20.8.1)

virtualenv PYPI version 20.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chemscad 2.0.3 - pcapprocessor 0.1.0 - pickley =3.0.6, =0.0.9, =1.61.0, =1.66.4 Source cves: CVE-2026-102937 Source advisory:...

ducktape (0.7.16), gym-simplifiedtetris-avela (0.1.6) +3 more potentially affected by CVE-2026-102938 via virtualenv (20.16.2)

virtualenv PYPI version 20.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ducktape 0.7.16 - gym-simplifiedtetris-avela 0.1.6 - pgsync =2.4.0, =1.66.5, =2.3.3 Source cves: CVE-2026-102938 Source advisory:...

chemscad (2.0.3), pcapprocessor (0.1.0) +3 more potentially affected by CVE-2026-102938 via virtualenv (20.8.1)

virtualenv PYPI version 20.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chemscad 2.0.3 - pcapprocessor 0.1.0 - pickley =3.0.6, =0.0.9, =1.61.0, =1.66.4 Source cves: CVE-2026-102938 Source advisory:...

ducktape (0.7.16), gym-simplifiedtetris-avela (0.1.6) +3 more potentially affected by CVE-2026-102938 via virtualenv (20.16.2)

virtualenv PYPI version 20.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ducktape 0.7.16 - gym-simplifiedtetris-avela 0.1.6 - pgsync =2.4.0, =1.66.5, =2.3.3 Source cves: CVE-2026-102938 Source advisory:...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2026-69248 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2026-69248 Source advisory:...

ais-dom (>=0.109.0b0, <=0.109.7), aws-gate (0.8.8) +10 more potentially affected by CVE-2026-69248 via cryptography (2.9.0)

cryptography PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.109.0b0, =0.3.0a0, =0.109.0b0, =2.0.0rc1, =2.3.7, =1.37.1, =1.37.8 - tornado-widgets 0.0.17 Source cves: CVE-2026-69248 Sourc...

cumulusci (3.57.0), kolombo (0.6.0.dev0) +2 more potentially affected by CVE-2026-69249 via cryptography (37.0.1)

cryptography PYPI version 37.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cumulusci 3.57.0 - kolombo 0.6.0.dev0 - seleniumbase =2.5.3, =3.0.0.dev6, =3.0.1 Source cves: CVE-2026-69249 Source advisory:...

ais-dom (>=0.109.0b0, <=0.109.7), aws-gate (0.8.8) +10 more potentially affected by CVE-2026-69249 via cryptography (2.9.0)

cryptography PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.109.0b0, =0.3.0a0, =0.109.0b0, =2.0.0rc1, =2.3.7, =1.37.1, =1.37.8 - tornado-widgets 0.0.17 Source cves: CVE-2026-69249 Sourc...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-59197 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-59197 Source advisory: OSV:GHSA-XJ96-63GP-2GMR...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-54059 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-54059 Source advisory: OSV:GHSA-8V84-F9PQ-WR9X...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-59205 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-59205 Source advisory: OSV:PYSEC-2026-3453...

helperpy (>=0.0.1, <=0.0.4), higlass-python (0.4.6) +4 more potentially affected by CVE-2026-59199 via pillow (8.3.0)

pillow PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - helperpy =0.0.1, =0.0.2, =0.0.22 - seleniumbase 1.63.14 - workflow-nodes 0.7.0 Source cves: CVE-2026-59199 Source advisory: OSV:PYSEC-2026-3451...

cheetajwt (>=1.0.0, <=1.2.0), datalogue (>=0.29.3, <=0.39.0) +3 more potentially affected by CVE-2025-71176 via pytest (3.6.3)

pytest PYPI version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - cheetajwt =1.0.0, =0.29.3, =1.12.0, =1.14.5 - syne 0.0.1 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

c2cwsgiutils (>=0.29.1, <=1.1.0), nlpknowledge (>=0.0.1, <=0.0.2.7) +4 more potentially affected by CVE-2025-71176 via pytest (3.2.3)

pytest PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - c2cwsgiutils =0.29.1, =0.0.1, =1.4.9, =0.1.0, =1.4.0.dev8, =1.4.0.dev9 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

c2cwsgiutils (>=0.22.0, <=0.27.0), elife-bus-sdk (>=0.0.3, <=0.0.4) +4 more potentially affected by CVE-2025-71176 via pytest (3.2.1)

pytest PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - c2cwsgiutils =0.22.0, =0.0.3, =0.2.0, =1.4.5, =1.4.8 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

conu (0.5.0), niapy (2.0.0rc2) +1 more potentially affected by CVE-2025-71176 via pytest (3.7.4)

pytest PYPI version 3.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - conu 0.5.0 - niapy 2.0.0rc2 - seleniumbase =1.15.5, =1.15.6 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

epab (>=0.3.14, <=0.3.24), mapistar (0.1.0) +2 more potentially affected by CVE-2025-71176 via pytest (3.4.0)

pytest PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - epab =0.3.14, =1.4.17, =1.6.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

epab (>=0.3.25, <=0.3.34), pytest-ui (0.3.0b0) +1 more potentially affected by CVE-2025-71176 via pytest (3.4.1)

pytest PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - epab =0.3.25, =1.7.0, =1.7.3 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

ocrmypdf (>=9.6.0, <=9.7.1), screenplay-pdf-to-json (>=0.1.0, <=0.3.4) +2 more potentially affected by CVE-2025-64512 via pdfminer-six (20200124.0.0)

pdfminer-six PYPI version 20200124.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.6.0, =0.1.0, =1.34.27, =1.36.9 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-64512 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...